← Back to browse · API

CVE-2016-0151

Severity
HIGH
CVSS
7.8
EPSS
0.63195
Risk score
78.32
CISA KEV
Yes
PoC
No
Published
2022-03-28
Modified
2022-03-28
First seen
2026-08-07
Aliases
EUVD-2016-0189, GHSA-M2MF-9MV6-9G77
Products
Microsoft:Client-Server Run-time Subsystem (CSRSS), n/a:n/a n/a
Sources
euvd EUVD-2016-0189
cisa.gov CVE-2016-0151

Description

The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.

References